Help Signature Verification Error: !

[kbalaji]

Hi All!

We have a valid certificate and I signed my jar file with the jarsigner
when I open it using jar:....!/prefstryjs.html" I am getting below error. I
ran out of options, please any help on the same would be great.

Error:
------
Signature Verification Error: the signature on prefstryjs.html is invalid
because the digital signature (*.RSA) file is not a valid signature of the
signature instruction file (*.SF).

Thanks
Balaji Kamal Kannadassan
--
View this message in context: http://www.nabble.com/Help-Signature-Verification-Error%3A-%21-tp20264052p20264052.html
Sent from the Mozilla - Cryptography mailing list archive at Nabble.com.

[Nelson Bolyard]

Balaji Kamal Kannadassan wrote, On 2008-10-31 04:24 PDT:

> We have a valid certificate and I signed my jar file with the jarsigner
> when I open it using jar:....!/prefstryjs.html" I am getting below error. I
> ran out of options, please any help on the same would be great.
>
> Error:
> ------
> Signature Verification Error: the signature on prefstryjs.html is invalid
> because the digital signature (*.RSA) file is not a valid signature of the
> signature instruction file (*.SF).

What software displayed that error message?

[leszek]

> What software displayed that error message?

I have the same error ... in the FireFox javascript: console.

I have created my own certificate as described here using signtool on a
CentOS system:
http://www.mozilla.org/projects/security/components/signed-scripts.html

--
View this message in context: http://www.nabble.com/Help-Signature-Verification-Error%3A-%21-tp20264052p20343219.html

[Nelson B Bolyard]

leszek wrote, On 2008-11-05 07:49:
>> What software displayed that error message?
>

> I have the same error ... in the FireFox javascript: console.

If you use signtool to verify the signature on your jar file,
what does it report?

signtool -v my.jar

Similarly, what does

signtool -w my.jar

tell you?

I suggest that you do this:
- exit your browser
- copy the *.db files from your browser profile directory to some new
test directory
- run the above signtool commands with the -d option, telling signtool
the name of that test directory, e.g.
signtool -d "mytestdirectory" -v my.jar

> I have created my own certificate as described here using signtool on a
> CentOS system:
> http://www.mozilla.org/projects/security/components/signed-scripts.html

Pardon my ignorance, but, what is CentOS ?
I don't recognize that name as one of the OSes supported by NSS.

[Kai Engert]

Nelson B Bolyard wrote:
> Pardon my ignorance, but, what is CentOS ?
>

CentOS is the name of a Linux distribution.

Kai

[David Stutzman]

Specifically it's built from Red Hat Enterprise Linux (RHEL) sources with the
Red Hat proprietary pieces removed.